$ rpki-client -vvf repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft (raw, json) Hash identifier: cr/6e1c1Uj+eLHfcnGfJrrv7MLiaZszV+7QaxBaUlkg= Subject key identifier: 15:54:DE:F4:F6:5F:FB:11:D5:4A:D6:F9:51:74:C3:D3:A6:FA:20:E2 Authority key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Certificate issuer: /CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Certificate serial: 790AF3131E890C41D6E043B06834E76C1888F59A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft Manifest number: 0108 Signing time: Sun 01 Mar 2026 13:01:18 +0000 Manifest this update: Sun 01 Mar 2026 12:56:18 +0000 Manifest next update: Wed 04 Mar 2026 17:32:18 +0000 Files and hashes: 1: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl (hash: Fz4bPD9zcZz9CEeSNDumZCntH55rgMt9XuX0HwyJLNw=) 2: 3130332e3135302e32322e302f32342d3234203d3e20313430333938.roa (hash: obby+PvQrLWYC3NU3QI0xYtZDC2hJcWlETHv+KWDEWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0a:f3:13:1e:89:0c:41:d6:e0:43:b0:68:34:e7:6c:18:88:f5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Validity Not Before: Mar 1 12:56:18 2026 GMT Not After : Mar 4 17:32:18 2026 GMT Subject: CN=1554DEF4F65FFB11D54AD6F95174C3D3A6FA20E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:03:04:c6:98:20:94:d3:31:0c:2a:14:2a:07: 77:67:e7:64:b3:8b:10:43:bf:ba:7e:d3:dd:b7:9c: ab:63:4d:fb:39:df:c7:9d:ab:45:fc:0a:4b:30:9c: 00:95:a3:6d:45:33:0f:1b:c6:6b:bd:9f:6e:ed:c3: b2:b1:a8:80:63:85:80:82:95:80:c2:3a:1e:e7:ed: 50:b4:86:5a:2c:53:fe:56:0d:27:00:6b:39:b2:70: d8:7e:66:99:5c:c2:d5:a1:15:92:b3:d0:a8:00:2e: 2f:f3:36:dc:c9:85:7d:62:d0:f4:e4:54:ef:98:66: 81:69:7f:81:82:06:cc:a8:d7:c9:c1:8d:18:1b:e0: 7f:3f:37:7d:8b:6a:f7:7d:1b:8f:01:8b:40:97:7c: ec:3c:86:c9:3a:b0:b4:b4:f6:28:6d:4a:79:a1:69: fb:1f:f3:49:21:5b:07:a4:40:81:b9:7b:5c:8b:2d: c1:d1:aa:09:9b:77:3f:97:f0:9b:e7:27:9f:48:0d: bb:15:21:2b:7d:30:b7:f8:00:1f:ef:8c:70:85:a1: 46:9f:a9:19:72:50:9b:c2:cb:b0:66:15:2e:37:c9: f9:b0:60:55:af:4c:03:14:05:59:d1:1a:2f:45:62: 8f:eb:1f:70:04:f3:0a:f7:56:ab:04:dd:a0:22:75: 60:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:DE:F4:F6:5F:FB:11:D5:4A:D6:F9:51:74:C3:D3:A6:FA:20:E2 X509v3 Authority Key Identifier: keyid:B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:72:fa:d3:a0:d7:56:ed:23:69:ed:21:f5:4b:6f:2f:65:5e: 03:a6:45:d1:02:d2:ba:15:b5:b0:11:e1:3a:db:b7:4d:41:1c: 3c:84:81:55:fa:fa:7c:5f:2e:d4:ec:27:63:6b:8b:ec:8f:f1: 39:72:d6:40:c2:30:71:a6:64:50:ca:a4:fa:33:ec:af:74:23: d0:2f:10:41:06:94:8f:e3:e2:68:43:3f:6c:da:76:0b:d1:f5: 16:cc:20:31:e1:e1:c3:9b:40:8b:00:39:6f:66:90:0f:a7:5b: fc:72:24:83:c3:59:d5:b3:d6:d6:bb:43:b5:b7:09:79:5c:c5: 71:66:5e:3e:64:c8:6e:54:45:f3:85:21:b7:ea:da:54:d2:f1: 11:44:e3:a5:6a:9a:e3:60:36:84:1c:09:26:b6:05:16:dc:ac: d7:8a:21:71:4d:06:99:9c:2e:ea:c2:30:05:21:f9:e7:05:3a: bd:2b:0b:f2:3d:52:f1:25:be:dc:20:fc:a0:e4:3b:96:a6:6a: c3:24:ba:eb:7a:ff:81:71:f8:54:38:1c:74:ed:ff:75:66:7b: 35:62:e0:73:d3:4b:0c:ee:29:f8:01:7e:4b:f1:70:9d:36:1a: b8:2f:77:73:ba:e5:83:5e:54:f1:fd:a2:bd:a1:75:9b:9a:cb: 69:c3:f1:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeQrzEx6JDEHW4EOwaDTnbBiI9ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdE OTcyQzZGNjAeFw0yNjAzMDExMjU2MThaFw0yNjAzMDQxNzMyMThaMDMxMTAvBgNV BAMTKDE1NTRERUY0RjY1RkZCMTFENTRBRDZGOTUxNzRDM0QzQTZGQTIwRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAwTGmCCU0zEMKhQqB3dn52Sz ixBDv7p+0923nKtjTfs538edq0X8CkswnACVo21FMw8bxmu9n27tw7KxqIBjhYCC lYDCOh7n7VC0hlosU/5WDScAazmycNh+ZplcwtWhFZKz0KgALi/zNtzJhX1i0PTk VO+YZoFpf4GCBsyo18nBjRgb4H8/N32Lavd9G48Bi0CXfOw8hsk6sLS09ihtSnmh afsf80khWwekQIG5e1yLLcHRqgmbdz+X8JvnJ59IDbsVISt9MLf4AB/vjHCFoUaf qRlyUJvCy7BmFS43yfmwYFWvTAMUBVnRGi9FYo/rH3AE8wr3VqsE3aAidWBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVTe9PZf+xHVStb5UXTD06b6IOIwHwYDVR0j BBgwFoAUuRHTTy6AFA1jrgL0y+cZ59lyxvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMC9COTExRDM0RjJF ODAxNDBENjNBRTAyRjRDQkU3MTlFN0Q5NzJDNkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5RTdEOTcy QzZGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZhODRkZTUtNjFkMS00NjE4LTlm YjQtNDNmNjMxYTEyODlhLzAvQjkxMUQzNEYyRTgwMTQwRDYzQUUwMkY0Q0JFNzE5 RTdEOTcyQzZGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxy+tOg11btI2ntIfVLby9lXgOmRdEC0roV tbAR4Trbt01BHDyEgVX6+nxfLtTsJ2Nri+yP8Tly1kDCMHGmZFDKpPoz7K90I9Av EEEGlI/j4mhDP2zadgvR9RbMIDHh4cObQIsAOW9mkA+nW/xyJIPDWdWz1ta7Q7W3 CXlcxXFmXj5kyG5URfOFIbfq2lTS8RFE46VqmuNgNoQcCSa2BRbcrNeKIXFNBpmc LurCMAUh+ecFOr0rC/I9UvElvtwg/KDkO5amasMkuut6/4Fx+FQ4HHTt/3VmezVi 4HPTSwzuKfgBfkvxcJ02Grgvd3O65YNeVPH9or2hdZuay2nD8d8= -----END CERTIFICATE-----Generated at Mon Mar 2 16:48:27 2026 by rpki-client